Google Git Google Git
Sign in
apache/struts/HEAD
  1. fda6ca9 WW-5786 test(convention): pin HTTP method enforcement on Convention actions by Lukasz Lenart · 11 hours ago main
  2. c85ec6d WW-5790 refactor(rest): read the baseline value only when a comparison needs it by Lukasz Lenart · 13 hours ago
  3. eb890e2 WW-5790 fix(rest): compare nested beans leaf by leaf against a same-class baseline by Lukasz Lenart · 13 hours ago
  4. a0e3fae WW-5790 docs: implementation plan for the two-phase copy baseline by Lukasz Lenart · 14 hours ago
  5. 462670a WW-5790 fix(rest): copy only what the body handler changed in the two-phase copy by Lukasz Lenart · 14 hours ago
  6. 8f3b4ab WW-5789 fix(rest): keep params-bound values when the body handler binds nothing by Lukasz Lenart · 23 hours ago
  7. f2ea51a WW-4323 test(core): pin that ParameterNameAware cannot accept an excluded name by Lukasz Lenart · 33 hours ago
  8. 432ed91 WW-3576 Keep SessionMap in step with the HttpSession (#2042) by Lukasz Lenart · 36 hours ago
  9. 2345827 build(deps): WW-5779 bump asm.version from 9.10.1 to 9.11 (#2030) by dependabot[bot] · 36 hours ago
  10. a8a6ee5 build(deps): bump com.github.ben-manes.caffeine:caffeine from 3.3.0 to 3.3.1 (#2027) by dependabot[bot] · 36 hours ago
  11. 4175ad1 build(deps): bump org.sitemesh:sitemesh from 3.2.3 to 3.3.0 (#2028) by dependabot[bot] · 36 hours ago
  12. cfd410e build(deps): bump org.webjars.npm:bootstrap-icons from 1.13.1 to 1.13.2 (#2029) by dependabot[bot] · 36 hours ago
  13. 301b078 build(deps): bump org.mockito:mockito-core from 5.23.0 to 5.24.0 (#2031) by dependabot[bot] · 36 hours ago
  14. 0de95f8f build(deps): bump github/codeql-action from 4.38.3 to 4.39.0 (#2046) by dependabot[bot] · 36 hours ago
  15. 1aefa59 build(deps): bump github/codeql-action/upload-sarif from 4.38.2 to 4.39.0 (#2047) by dependabot[bot] · 36 hours ago
  16. 638291a WW-3792 test(core): pin css_xhtml checkbox left-label wrappers to match other controls (#2041) by Lukasz Lenart · 6 days ago
  17. 83864b1 WW-3720 test(core): cover comma-delimited interceptor params split across lines (#2040) by Lukasz Lenart · 6 days ago
  18. 6b2c315 WW-3666 Trim surrounding whitespace before converting to non-String types (#2039) by Lukasz Lenart · 6 days ago
  19. f69198c Merge pull request #2038 from apache/feature/WW-3717-http-method-attribute by Lukasz Lenart · 6 days ago
  20. 1dade4f WW-3717 refactor(core): address Sonar findings on the http-method change by Lukasz Lenart · 6 days ago
  21. ced991c WW-3717 fix(core): look up the unknown handler manager when a request is rejected by Lukasz Lenart · 7 days ago
  22. c3155ce WW-3717 fix(core): resolve the bad-request result like the action invocation does by Lukasz Lenart · 7 days ago
  23. 9b1fac7 WW-3717 feat(core): restrict an action to HTTP methods with an http-method attribute by Lukasz Lenart · 7 days ago
  24. f648b28 WW-3655 test(freemarker): guard against resolving the result location from the request URI (#2037) by Lukasz Lenart · 7 days ago
  25. 2f7e086 WW-3624 feat(tags): allow regex matching of field names on fielderror tag (#2036) by Lukasz Lenart · 7 days ago
  26. 76d6b14 WW-5782 fix(tags): document and warn that s:a href ignores nested params (#2034) by Lukasz Lenart · 7 days ago
  27. 98ee4e1 WW-5781 fix(tags): render a single class and style on checkboxlist and radio inputs (#2026) by Lukasz Lenart · 7 days ago
  28. b8da6b5 WW-5780 fix(html5): close the checkbox input in the html5 checkboxlist template (#2025) by Lukasz Lenart · 7 days ago
  29. 8f481e7 WW-5765 fix(interceptor): re-store only the token validated in the request in execAndWait (#2022) by Lukasz Lenart · 8 days ago
  30. 7572dc6 build(ci): align GitHub Actions with the ASF Actions policy (#2024) by Lukasz Lenart · 8 days ago
  31. 545986b build(deps-dev): bump org.apache.tomcat.embed:tomcat-embed-core from 11.0.26 to 11.0.27 (#2020) by dependabot[bot] · 8 days ago
  32. e3dbdcc build(deps): bump com.fasterxml.jackson:jackson-bom from 2.22.2 to 2.22.3 (#2019) by dependabot[bot] · 8 days ago
  33. 321a76f build(deps): bump github/codeql-action from 4.38.2 to 4.38.3 (#2018) by dependabot[bot] · 8 days ago
  34. d313b32 build(deps): bump mikepenz/action-junit-report from 6.5.0 to 6.6.1 (#2017) by dependabot[bot] · 8 days ago
  35. 264be70 build(deps-dev): bump org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0 (#2016) by dependabot[bot] · 8 days ago
  36. becf041 build(deps): bump ossf/scorecard-action from 2.4.4 to 2.5.0 (#2015) by dependabot[bot] · 8 days ago
  37. e2580be build(deps): bump ognl:ognl from 3.4.15 to 3.4.16 (#2014) by dependabot[bot] · 8 days ago
  38. a91460a WW-5772 Remove inline event handlers from optiontransferselect, inputtransferselect, updownselect and combobox (#2012) by aeon · 9 days ago
  39. 447ae1b build(ci): build a reduced matrix on pull requests (#2011) by Lukasz Lenart · 9 days ago
  40. 6ad8d09 build(ci): detect changes in-job and cancel superseded PR runs (#2010) by Lukasz Lenart · 9 days ago
  41. 3621514 WW-5770 Make struts.convention.result.path scopable per package (#2009) by Lukasz Lenart · 9 days ago
  42. 26cedce build(ci): detect changes in-job and cancel superseded PR runs by Lukasz Lenart · 9 days ago
  43. 65a8f86 WW-5768 Make struts.ui.theme and struts.ui.templateDir scopable per package (#2008) by Lukasz Lenart · 11 days ago
  44. da2bcf6 WW-5767 Apply value substitution to scoped-constant values (#2007) by Lukasz Lenart · 11 days ago
  45. 3355548 WW-5766 feat(config): map struts.scopedConstantProvider in ConstantConfig (#2006) by Lukasz Lenart · 11 days ago
  46. 260551c WW-5766 feat(config): map struts.scopedConstantProvider in ConstantConfig by Lukasz Lenart · 11 days ago
  47. fd60b20 WW-3476 Add package-scoped constants (#2005) by Lukasz Lenart · 12 days ago
  48. 6cbf4e7 Merge pull request #2004 from apache/WW-3464-wildcard-first-match-wins by Lukasz Lenart · 13 days ago
  49. 14bb4d8 WW-3464 test(config): pin first-match-wins wildcard order by Lukasz Lenart · 13 days ago
  50. cca45de Merge pull request #2003 from apache/WW-3447-convention-flag-coverage by Lukasz Lenart · 13 days ago
  51. 8b5af42 WW-3447 test(convention): cover action-mapping flags with no tests by Lukasz Lenart · 13 days ago
  52. 8503fb7 Merge pull request #2002 from apache/WW-3364-json-writer-type-converters by Lukasz Lenart · 13 days ago
  53. 999543a WW-3364 refactor(json): extract processObject to reduce process() complexity by Lukasz Lenart · 13 days ago
  54. cb06271 WW-3364 feat(json): use registered type converters in JSON serialization by Lukasz Lenart · 13 days ago
  55. 6fb6e2c Merge pull request #2001 from apache/chore/dependabot-skill-ticket-handoff by Lukasz Lenart · 2 weeks ago
  56. 56d6361 chore: hand Dependabot tickets back open and read fix versions from Jira by Lukasz Lenart · 2 weeks ago
  57. 44201d5 build(deps): WW-5764 bump com.github.ben-manes.caffeine:caffeine from 3.2.4 to 3.3.0 (#1995) by dependabot[bot] · 2 weeks ago
  58. 687b192 build(deps): WW-5763 bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 (#1997) by dependabot[bot] · 2 weeks ago
  59. 5582c3d build(deps): bump org.apache.maven:apache-maven from 3.9.16 to 3.10.0 (#1996) by dependabot[bot] · 2 weeks ago
  60. bb77778 build(deps-dev): bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 (#1999) by dependabot[bot] · 2 weeks ago
  61. 445fd24 Merge pull request #1994 from apache/docs/claude-md-drop-version by Lukasz Lenart · 2 weeks ago
  62. 18465c8 docs: drop the hard-coded version from CLAUDE.md by Lukasz Lenart · 2 weeks ago
  63. 04373ae WW-5758 Enforce @StrutsParameter authorization in AliasInterceptor's raw-parameter fallback (#1991) by ⳕⲛτⲉⲅⲥⲉⳏτⲟⲅ 🕵🏻 · 2 weeks ago
  64. 8778368 WW-5760 build(deps): bump OGNL from 3.4.14 to 3.4.15 (#1993) by Lukasz Lenart · 2 weeks ago
  65. 056a6f3 WW-5760 build(deps): bump OGNL from 3.4.14 to 3.4.15 by Lukasz Lenart · 2 weeks ago
  66. 9aa77f7 WW-5759 Resolve @StrutsParameter accessors the way OGNL does (#1992) by Lukasz Lenart · 2 weeks ago
  67. dcfdec9 Merge pull request #1989 from apache/WW-5757-bean-validation-message-template by Lukasz Lenart · 2 weeks ago
  68. 17a26bf WW-5757 test(bean-validation): cover message encoding and lookup failure in resolveMessage by Lukasz Lenart · 3 weeks ago
  69. 95f2058 WW-5757 fix(bean-validation): resolve the constraint message template as the text key by Lukasz Lenart · 3 weeks ago
  70. a235259 Merge pull request #1988 from apache/docs/threat-model-s2-075-to-s2-078 by Lukasz Lenart · 3 weeks ago
  71. e3613f9 docs(skills): carry the 7.4.0 / 6.12.0 advisory lessons into the release skills (#1987) by Lukasz Lenart · 3 weeks ago
  72. 765f8af docs: re-baseline THREAT_MODEL.md against S2-075 to S2-078 by Lukasz Lenart · 3 weeks ago
  73. 153a789 docs(skills): carry the 7.4.0 / 6.12.0 advisory lessons into the release skills by Lukasz Lenart · 3 weeks ago
  74. c8c7b4e docs(skills): resolve Dependabot tickets via Jira transition id (#1985) by Lukasz Lenart · 3 weeks ago
  75. c0628dd build(deps): bump ognl:ognl from 3.4.12 to 3.4.13 (#1971) by dependabot[bot] · 3 weeks ago
  76. 608662d build(deps): bump org.apache.felix:maven-bundle-plugin from 6.1.2 to 6.2.0 (#1972) by dependabot[bot] · 3 weeks ago
  77. 3ae18df build(deps-dev): bump byte-buddy.version from 1.18.13 to 1.18.14 (#1974) by dependabot[bot] · 3 weeks ago
  78. f06fc30 build(deps): bump org.webjars:webjars-locator-lite from 1.1.4 to 1.1.5 (#1975) by dependabot[bot] · 3 weeks ago
  79. edf2982 build(deps): bump github/codeql-action from 4.38.0 to 4.38.2 (#1978) by dependabot[bot] · 3 weeks ago
  80. 54a1ca3 WW-5752 Normalize request-derived values in log messages (#1982) by ⳕⲛτⲉⲅⲥⲉⳏτⲟⲅ 🕵🏻 · 3 weeks ago
  81. 707108b Release 7.4.0 RC-1 (#1968) by Lukasz Lenart · 3 weeks ago
  82. 972fd8a WW-5751 Treat a negative maximumSize as no upload size limit (#1976) by Lukasz Lenart · 3 weeks ago
  83. 1d92b07 WW-5753 Reject cross-site non-GET navigations and cross-site GET subresource requests in the Fetch Metadata policy (#1983) by ⳕⲛτⲉⲅⲥⲉⳏτⲟⲅ 🕵🏻 · 3 weeks ago
  84. 3e428e4 docs: drop derivable layout and architecture sections from CLAUDE.md (#1977) by Lukasz Lenart · 4 weeks ago
  85. e5fb8e9 build(ci): test once on JDK 17 in Jenkins, reserve Jetty ports for the showcase ITs (#1967) by Lukasz Lenart · 5 weeks ago
  86. c407f7f ci: pin Scorecards checkout action by commit (#1966) by Robert McConnell · 5 weeks ago
  87. 85f30e3 build(deps-dev): bump org.apache.tomcat.embed:tomcat-embed-core from 10.1.59 to 11.0.26 (#1949) by dependabot[bot] · 5 weeks ago
  88. 9f392c9 build(deps): bump github/codeql-action from 4.37.9 to 4.38.0 (#1952) by dependabot[bot] · 5 weeks ago
  89. 3d51632 build(deps-dev): bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 (#1954) by dependabot[bot] · 5 weeks ago
  90. 9a0c457 build(deps-dev): bump org.codehaus.mojo:versions-maven-plugin from 2.21.0 to 2.22.0 (#1950) by dependabot[bot] · 5 weeks ago
  91. 16fd322 build(ci): decide "does this need a build" in one reusable workflow (#1965) by Lukasz Lenart · 5 weeks ago
  92. 22b24ef docs(skills): send the [TEST] mail from the @apache.org identity (#1963) by Lukasz Lenart · 5 weeks ago
  93. 02116f7 docs: state the control test that separates hardening from a vulnerability (#1964) by Lukasz Lenart · 5 weeks ago
  94. 9d2a401 [maven-release-plugin] prepare for next development iteration by Lukasz Lenart · 5 weeks ago
  95. 7ba6ef0 [maven-release-plugin] prepare release STRUTS_7_4_0 by Lukasz Lenart · 5 weeks ago STRUTS_7_4_0
  96. cd6fbb3 WW-5743 fix(convention): rank path-spanning ** patterns after single-segment ones (#1962) by Lukasz Lenart · 5 weeks ago
  97. 39620ca WW-5719 Pin Maven distribution checksum (#1942) by cameroncrippen · 5 weeks ago
  98. e213ef6 WW-5713 refactor(tiles): resolve the legacy OGNL flag from the container's own ServletContext (#1961) by Lukasz Lenart · 5 weeks ago
  99. d083a3a WW-5713 fix(tiles): fail closed for legacy Tiles OGNL evaluation (#1890) by Karan Kurani · 5 weeks ago
  100. 2e01eaa WW-5749 fix(rest): write nothing from the XML handlers when there is no target (#1959) by Lukasz Lenart · 5 weeks ago